Java

Use a PFX TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCertPfx method, which sets the client-side certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file. The first argument is the path to the PFX file and the second is its password. This example loads a client certificate directly from a PFX.

Background: This is the convenience form of SetSslClientCert: rather than loading a Cert object first, you point straight at the PFX file and password. A PFX (PKCS#12) bundles the certificate with its private key — exactly what mutual TLS requires, since the client must prove possession of the key during the handshake. It is the usual client-credential format on Windows.

Chilkat Java Downloads

Download Chilkat for Java

Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.MailMan;

public class ChilkatExample {

    public static void main(String[] args) {
        boolean success = false;

        // Demonstrates the MailMan.SetSslClientCertPfx method, which sets the client-side
        // certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file.  The 1st argument
        // is the PFX path and the 2nd is the PFX password.

        MailMan mailman = new MailMan();

        // Configure the SMTP server connection.
        mailman.setSmtpHost("smtp.example.com");
        mailman.setSmtpPort(465);
        mailman.setSmtpSsl(true);
        mailman.setSmtpUsername("user@example.com");
        mailman.setSmtpPassword("myPassword");

        // Load the client certificate directly from a PFX file.
        try {
            mailman.setSslClientCertPfx("qa_data/certs/client.pfx", "pfx_password");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        success = mailman.verifySmtpLogin();
        if (!success) {
            System.out.println(mailman.getLastErrorText());
            return;
        }

        System.out.println("Connected using a PFX TLS client certificate.");

        // Note: The path "qa_data/certs/client.pfx" is a relative local filesystem path,
        // relative to the current working directory of the running application.
    }
}